Ani.Gen’s Staying Power Marks Poor Patching Practices Friday 3 August 2007 PDF Print Latest threat detection statistics from ESET Bournemouth, UK (3rd August 2007) – ESET announced today that the trojan Ani.Gen is once again the number one threat to computer users according to ESET’s ThreatSense.Net statistical reporting. July marks the fourth consecutive month that Ani.Gen has topped the threat chart. ESET attributes Ani.Gen’s staying power not only to its wide distribution, but also points out that users not updating their operating systems exasperate the problem. Win32/TrojanDownloader.Ani.Gen, which exploits how Windows handles animated cursor (.ani) files, requires no action on the user’s part to become infected other than to visit or view an affected website or email. Its success lies in its ability to expose even fairly sophisticated users to “drive by” attacks that can compromise their computers. “Ani.Gen encompasses the detection of a variety of threats that use the .ANI vulnerability to infect users with other malicious software,” explains Randy Abrams, Director of Education, ESET. “One of the contributing factors to its success is that exploit toolkits will attempt a variety of exploits. Malformed files using this exploit can easily be sent via spam from large botnets, and such files can be included with software such as "free smileys", and of course "free cursors". The effectiveness of the exploit, the variety of vectors in which it can be introduced, and poor patching practices are probably all parts of the reason the threat has stayed on top of the charts.” The threat from malware designed to propagate via portable storage media, highlighted last month, is still strong with rise of Rjump.A and INF/Autorun to second and third position in the threat chart. The wide use of portable storage media such as USB sticks and memory cards makes them a likely target for malware writers. Top 10 Threats for July 2007 1 Win32/TrojanDownloader.Ani.Gen – 3.66% 2 Win32/Rjump.A – 2.26% 3 INF/Autorun – 1.99% 4 Win32/Pacex.Gen – 1.61% 5 Win32/Adware.Virtumonde – 1.46% 6 WIN32/Obfuscated – 1.46% 7 Win32/Adware.Ezula 1.37% 8 Win32/Adware.Virtumonde.KI – 1.01% 9 Win32/Netsky.Q – 1.0% 10 Win32/Spy.VBStat.J – 0.97% ### About ThreatSense.Net ThreatSense.Net reports detection statistics from millions of client computers around the world and is believed to be the most comprehensive malware reporting system available. From an original idea, realised in VIRUS RADAR http://www.virusradar.com, ThreatSense.Net, includes data about all types of threats seen attacking user systems, not just those transmitted via email. The (anonymous) statistical information is collected from NOD32 users who enable the reporting service in the product, and it gives a comprehensive view of the behaviour and spread of malware in the real world. Currently data is collected from more than 10 million systems, and has tracked more than 10,000 different threats and malware families. About ESET Founded in 1992, ESET is a global provider of security software for enterprises and consumers. ESET's award-winning, anti-threat software system, NOD32, provides real-time protection from known and unknown viruses, spyware and other malware. NOD32 offers the smallest, fastest and most advanced protection available, with more Virus Bulletin 100% Awards than any other antivirus product (www.virusbulletin.com). ESET has been named in Deloitte's Technology Fast 500 four years running, and has an extensive partner network, including corporations such as Canon, Dell and Microsoft. ESET is headquartered in Bratislava, SK; and is represented worldwide in more than 100 countries. For more information, please visit www.eset.co.uk or call 0845 838 0832. PR Contact: Sara Claridge Marylebone Media Relations firstname.lastname@example.org +44 (0) 870 766 8482 +44 (0) 7968 626838 (mobile) www.marylebone.co.uk This press release was distributed by ResponseSource Press Release Wire on behalf of Marylebone Media Relations in the following categories: Consumer Technology, Computing & Telecoms, for more information visit http://pressreleasewire.responsesource.com/about.